Manager, Third Party Risk

**About Airwallex**:
Airwallex is the only unified payments and financial platform for global businesses. Powered by our unique combination of proprietary infrastructure and software, we empower over 150,000 businesses worldwide - including Brex, Rippling, Navan, Qantas, SHEIN and many more - with fully integrated solutions to manage everything from business accounts, payments, spend management and treasury, to embedded finance at a global scale.

Proudly founded in Melbourne, we have a team of over 1,800 of the brightest and most innovative people in tech across 26 offices around the globe. Valued at US$6.2 billion and backed by world-leading investors including Visa, Airtree, Blackbird, Sequoia, DST Global, Greenoaks, Salesforce Ventures, Lone Pine, and Square Peg, Airwallex is leading the charge in building the global payments and financial platform of the future. If you’re ready to do the most ambitious work of your career, join us.

**Attributes We Value**:
We hire successful builders with founder-like energy who want real impact, accelerated learning, and true ownership. You bring strong role-related expertise and sharp thinking, and you’re motivated by our mission and operating principles. You move fast with good judgment, dig deep with curiosity, and make decisions from first principles, balancing speed and rigor.

You're humble and collaborative; turn zero‑to‑one ideas into real products, and you “get stuff done” end-to-end. You use AI to work smarter and solve problems faster. Here, you’ll tackle complex, high‑visibility problems with exceptional teammates and grow your career as we build the future of global banking. If that sounds like you, let’s build what’s next.

**What You’ll Do**

As a **Manager, Third Party Risk**based in Amsterdam, you will play a mission-critical role in overseeing the end-to-end lifecycle of third-party risk management (TPRM) across Airwallex. You will hold primary accountability for ensuring compliance with DORA, the EBA outsourcing guidelines, and local NL/UK outsourcing rules, while also contributing to the uplift and execution of Airwallex’s global TPRM framework. Working closely with Legal, Compliance, Information Security, Procurement, and business leaders worldwide, you will help embed a risk-based, automated, and scalable approach across onboarding, contract review, performance monitoring, and vendor exit—ensuring Airwallex strengthens operational resilience, regulatory compliance, and innovation globally.

**Responsibilities**
- Lead the full TPRM lifecycle—onboarding, due diligence, contract/SLA review, performance monitoring, and vendor exit—across EMEA, while contributing to global consistency and best practice.
- Conduct risk assessments to identify, evaluate, and mitigate regulatory, operational, financial, and reputational risks for suppliers across multiple regions.
- Ensure compliance with DORA, EBA outsourcing guidelines, and local NL/UK rules, while supporting global alignment of frameworks, policies, and the Group’s Register of Information for ICT providers.
- Monitor supplier performance, SLAs, and risk metrics; escalate issues and enforce remediation plans; ensure contracts include adequate security, audit, incident, exit, and recovery provisions.
- Partner with Legal, Compliance, Infosec, Procurement, and business owners globally to strengthen third-party and subcontractor governance.
- Support continuous enhancement of TPRM policies, automation, and reporting through platforms such as AuditBoard; maintain audit-ready documentation and test process resilience.
- Provide management, risk committees, and governance forums with actionable reporting on risk trends, remediation status, and emerging third-party risk themes—both regionally and globally.

**Who You Are**
- Minimum qualifications_
- 3-5 years’ experience in third-party risk, outsourcing risk, operational risk, or compliance/assurance within financial services, fintech, or other regulated environments.
- Demonstrated hands-on involvement in the full TPRM lifecycle (onboarding, due diligence, contract/SLA review, monitoring, and exit).
- Familiarity with, or direct experience applying, DORA, EBA outsourcing guidelines, and regulatory expectations for ICT/cloud providers in the EU.
- Strong understanding of vendor contract requirements (security, audit, incident reporting, exit strategy) and ability to drive contract remediation initiatives.
- Experience using TPRM automation/workflow platforms (e.g., AuditBoard, OneTrust) and producing data-driven risk reporting.
- Excellent communication and stakeholder management skills, with the ability to build credibility and influence across global teams.
- Preferred qualifications_
- Experience interfacing with regulators (DNB, FCA, EBA) or supporting regulatory audits/assessments.
- Knowledge of cloud, SaaS, and fourth-party/sub-outsourcing risks in financial services.
- Prior responsibility for managing resilience, performance, and due diligence of